Cybersecurity

Offensive security and security audits

Penetration testing, code review, social engineering and physical security: we check your defences the way an attacker would, then help you strengthen them.

Free quote 514 918-3381

Written scope
Verified findings
Retest included
EN / FR

Our approach

Security verified, not assumed

Altea tests your defences the way an attacker would — over the Internet, from inside the network, through your application code, through your people and through your buildings’ front door. Every engagement has a written scope, rules of engagement and a report with evidence, risk level and fix. And because Altea is also a network and access control integrator, we can fix what we find.

What you get

Free scoping call
Written rules of engagement
Manually verified findings, with evidence
Executive summary
Prioritized remediation plan
Retest of fixes
Attestation letter for customers or insurer

Free quote

Penetration testing

We attack your network the way an intruder would, within a scope agreed with you, and hand you a prioritized fix plan.

Learn more

External penetration testing

Firewall, VPN, email, websites, remote access: we map everything your company exposes online and check that nothing gives way.

Learn more

Internal penetration testing

If a computer is compromised or a visitor plugs in a device, how far can they go? We measure it, from the network up to the domain controller.

Learn more

Web application penetration testing

Customer portal, online store, SaaS app or API: we look for the flaws an attacker would exploit, before they do.

Learn more

Wi-Fi penetration testing

Wi-Fi spills into the parking lot. We check that an intruder outside can’t connect or hop from the guest network to the internal one.

Learn more

Code and applications

Secure code review

We read your code to find what outside testing can’t see: secrets, logic flaws, vulnerable dependencies and forgotten access checks.

Learn more

Web application penetration testing

Customer portal, online store, SaaS app or API: we look for the flaws an attacker would exploit, before they do.

Learn more

People and physical

Social engineering and phishing simulation

Most attacks start with an email or a call. We measure how your teams react, without shaming anyone, then train them.

Learn more

Physical security assessment

Doors, cards, keys, cameras, server room: we check whether someone can get in where they shouldn’t, and tell you how to stop them.

Learn more

Hygiene and configuration

Vulnerability scanning

Regular scanning of your computers, servers and devices to know what isn’t patched, with a prioritized list — not 3,000 alerts.

Learn more

Security configuration review

Misconfigurations cause as many incidents as vulnerabilities. We review your critical settings against recognized good practice.

Learn more

Firewall and cybersecurity

A well-configured firewall, a segmented network, secure remote access and filtering: the basics that stop most attacks.

Learn more

Network audit

Is your network slow, dropping or too expensive? We measure before concluding, then fix it.

Learn more

Free tool

Where do you stand? 15-question self-assessment

Start

Guides and comparisons

Fortinet or a UniFi gateway?Altea installs both. Here is when a Fortinet firewall is the right call and when a UniFi gateway is…Segmenting the network: cameras, IoT and guests apartOn a flat network, a compromised camera or printer sees every computer. Segmentation cuts that path. The…Preparing a network auditA good audit starts with good questions. Here’s what’s useful to note before our…Penetration testing for SMBs: what to expectPenetration testing isn’t only for large companies. Here’s how it runs, the time it takes from your team and…Penetration test or vulnerability scan?The two terms are often confused, and some offers sell an automated scan as a “penetration test”. Here is the…SAST, DAST or manual code review?Three ways to look for application flaws. Each sees things the others…Penetration test or red team exercise?A pentest finds as many flaws as possible within a scope; a red team exercise checks whether you detect and…125 kHz proximity cards or secure cards?Many buildings and companies still use 125 kHz cards. They can be copied in seconds. What to know before…The OWASP Top 10, explained simplyThe OWASP Top 10 is the reference list of web application risks. Here is what each category means, in plain…Preparing a penetration test: the checklistA well-prepared test costs less and finds more. Here is what to decide and gather before day…How to read a penetration test reportSummary, risk levels, CVSS scores, evidence, fixes: how to navigate it and what to fix…Cyber insurance: the controls insurers ask forCyber insurance questionnaires look alike. Here are the controls that come up most and how to document…Law 25: what to do after a privacy incidentIn Quebec, unauthorized access to personal information triggers specific obligations. The main steps, and how…Physical security: 15 things to check in your buildingsEven before an assessment, these simple checks reveal most physical weaknesses in an office, store or…

Penetration testing by city

Physical security by city

Industries

Retail Offices and SMBs Warehouses and industrial sites Clinics and healthcare Schools and daycares Hotels and restaurants

FAQ

Frequently asked questions

Which test should we start with?

For most SMBs: an external and an internal test, then a phishing simulation. If you build applications, add a web app test and a code review. The self-assessment helps prioritize.

Do you work with our IT provider?

Yes. Testing by someone independent from whoever runs your systems is good practice; we share findings and fixes with your team or provider.

Does our information stay confidential?

Yes: confidentiality agreement, access limited to the engagement and reports delivered securely.

Do you work everywhere in Quebec?

Yes. External, application and code reviews are remote; internal, Wi-Fi and physical tests are on site, anywhere in Quebec.

Planning a security assessment?

Describe your situation in a few lines; an engineer will call you back quickly. The site visit and quote are free.

Free quote 514 918-3381

Quote

Request a quote

Free, no obligation. A quick answer from an engineer, in English or French.

Call514 918-3381 Email[email protected]

Free site visit and quote
An engineer, not a salesperson
15+ years’ experience, across Quebec
Hardware stocked on altea.io

Updated 2026-11-05